🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 94.154.43.195
Firstseen:2026-10-26 06:50:23 UTC
Total malware sites :17
Online malware sites :0 (0%)
Offline Malware sites :17 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-10-26 06:50:32 94.154.43.195SBL697626AS219502 STORMCLOUD-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-10-27 05:35:14http://94.154.43.195/bins/aarch64Offline94-154-43-195 CatStorm elf ua-wget BlinkzSec
2026-10-27 05:34:52http://94.154.43.195/bins/mipselOffline94-154-43-195 CatStorm elf ua-wget BlinkzSec
2026-10-27 05:33:26http://94.154.43.195/bins/i686Offline94-154-43-195 elf mirai ext ua-wget BlinkzSec
2026-10-27 05:33:26http://94.154.43.195/bins/cncOffline94-154-43-195 elf ua-wget BlinkzSec
2026-10-27 05:33:05http://94.154.43.195/run.shOffline94-154-43-195 sh ua-wget BlinkzSec
2026-10-26 08:36:34http://94.154.43.195/bins/arm6OfflineCatStorm dropper elf Loader mirai ext multiarch tipo_deincognito
2026-10-26 08:28:25http://94.154.43.195/bins/arm5OfflineDarkDDoSer dropper elf Loader mirai ext multiarch tipo_deincognito
2026-10-26 08:25:08http://94.154.43.195/wget.shOfflinedropper elf Loader mirai ext multiarch tipo_deincognito
2026-10-26 08:12:30http://94.154.43.195/bins/x86_64OfflineCatStorm ddos elf miner monero tipo_deincognito
2026-10-26 07:50:12http://94.154.43.195/bins/mipsOfflineCatStorm dropper elf Loader mirai ext multiarch tipo_deincognito
2026-10-26 07:29:56http://94.154.43.195/bins/arm7OfflineCatStorm dropper elf Loader mirai ext multiarch tipo_deincognito
2026-10-26 07:21:46http://94.154.43.195/bins/m68kOfflinedropper elf Loader mirai ext multiarch tipo_deincognito
2026-10-26 07:18:27http://94.154.43.195/w.shOfflinedropper elf Loader mirai ext multiarch tipo_deincognito
2026-10-26 07:16:48http://94.154.43.195/c.shOfflinedropper elf Loader mirai ext multiarch tipo_deincognito
2026-10-26 06:57:03http://94.154.43.195/bins/ppcOfflinedropper elf Loader mirai ext multiarch tipo_deincognito
2026-10-26 06:55:19http://94.154.43.195/bins/x86OfflineCatStorm ddos elf miner mirai ext monero tipo_deincognito
2026-10-26 06:50:32http://94.154.43.195/bins/armOfflinedropper elf Loader mirai ext multiarch tipo_deincognito